This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json) Hash identifier: NpL5ZKrEJiwwVQ5PVcHiWYyN/vAdfCGZMAeyds8Hi38= Subject key identifier: 7D:0F:21:FC:BC:1D:5C:EA:D4:3C:00:2B:77:81:C3:52:53:D1:F3:1C Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Certificate serial: 019B41DB04A8DC387F6EA71A917D397EDB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft Manifest number: 11AC Signing time: Sun 21 Dec 2025 17:00:31 +0000 Manifest this update: Sun 21 Dec 2025 17:00:31 +0000 Manifest next update: Mon 22 Dec 2025 17:00:31 +0000 Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=) 2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: /G7LbMlt4YmTXXIHfKltnBO5pYQqNwPF6jSnf5ZzKiM=) 3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:04:a8:dc:38:7f:6e:a7:1a:91:7d:39:7e:db:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Validity Not Before: Dec 21 17:00:31 2025 GMT Not After : Dec 22 17:00:31 2025 GMT Subject: CN=7d0f21fcbc1d5cead43c002b7781c35253d1f31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:57:37:a0:04:58:c4:c7:1b:37:61:d9:48: d5:6c:1b:65:a8:05:93:8d:dc:66:3a:87:db:91:48: 5c:27:90:8c:27:ae:dc:7d:38:62:c9:ce:52:69:e8: 9e:05:56:98:22:b7:54:b9:24:0e:8f:25:d5:6d:fe: 77:aa:ce:37:70:bd:c6:56:5e:26:d1:8f:7c:2a:ad: 12:f9:4b:df:e0:57:1e:5c:69:77:c1:40:10:53:17: 5b:da:fd:56:8c:2b:46:34:16:88:64:73:05:74:d6: 0d:79:d5:4e:ff:da:69:5b:86:37:0a:03:78:e3:2e: 38:77:24:bc:5e:a1:b3:27:ee:35:f1:12:f3:dc:9a: 08:c9:df:5d:57:27:ea:23:b8:5e:6b:8f:92:cf:84: fb:6b:57:a3:be:23:25:b3:e8:12:16:b6:bd:0f:dc: 79:93:47:a1:a3:e7:a6:d8:5b:ab:c5:4d:83:eb:46: 08:a6:ff:ab:91:1a:01:4e:9a:ba:d4:cc:6c:ee:da: 3a:d9:f0:bc:61:a6:aa:3c:8b:59:ee:a8:95:56:12: 9b:0d:7e:cf:3a:9f:57:d3:87:2c:88:89:64:4c:78: 0d:e2:80:24:8c:92:ae:3e:0d:de:f7:67:60:68:ff: 0a:84:0a:58:37:74:59:88:23:ea:39:f6:50:41:68: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:21:FC:BC:1D:5C:EA:D4:3C:00:2B:77:81:C3:52:53:D1:F3:1C X509v3 Authority Key Identifier: keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5b:3b:4e:09:80:9c:6d:bd:86:c2:8a:45:e9:1c:c4:47:20: 4c:6c:ea:a6:c2:75:a9:31:b0:6c:e5:34:84:ed:db:eb:86:7b: e8:e8:33:82:73:88:bc:6b:12:44:1d:15:d7:39:45:df:20:0f: aa:f9:c5:a6:da:b2:a5:85:29:48:59:09:07:d4:a2:b1:2e:52: 40:c7:81:37:1b:71:51:8b:96:00:81:03:84:11:dc:5e:11:0b: 46:2b:3a:f9:ae:dd:53:57:b1:e7:19:15:0b:0c:d1:ce:87:f8: ab:07:7a:f2:78:70:87:42:b7:28:29:7c:a9:7f:64:96:3a:c7: 6b:08:ae:79:a3:41:38:28:cd:80:ce:a5:cf:c9:ef:81:8d:50: 46:af:e4:cf:16:48:37:02:1b:90:b0:9a:7c:d2:c5:ab:57:32: b2:86:07:db:26:2c:ac:c8:67:50:bf:f4:13:1b:28:93:5d:78: 1a:13:40:8a:d9:2e:c8:54:02:9e:5c:c4:68:4e:d5:eb:ff:51: 13:da:ca:de:70:14:fc:c1:2a:97:d7:da:58:7a:bd:2e:04:3a: 71:31:f6:40:1d:1d:ac:79:15:01:f0:53:e1:09:b9:53:53:2b: 86:74:8e:29:9b:75:51:3e:d2:2e:36:bd:86:9f:3d:f3:3a:da: a7:32:2e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2wSo3Dh/bqcakX05ftsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4 ZjYyYzgwHhcNMjUxMjIxMTcwMDMxWhcNMjUxMjIyMTcwMDMxWjAzMTEwLwYDVQQD Eyg3ZDBmMjFmY2JjMWQ1Y2VhZDQzYzAwMmI3NzgxYzM1MjUzZDFmMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArslXN6AEWMTHGzdh2UjVbBtlqAWT jdxmOofbkUhcJ5CMJ67cfThiyc5SaeieBVaYIrdUuSQOjyXVbf53qs43cL3GVl4m 0Y98Kq0S+Uvf4FceXGl3wUAQUxdb2v1WjCtGNBaIZHMFdNYNedVO/9ppW4Y3CgN4 4y44dyS8XqGzJ+418RLz3JoIyd9dVyfqI7hea4+Sz4T7a1ejviMls+gSFra9D9x5 k0eho+em2FurxU2D60YIpv+rkRoBTpq61Mxs7to62fC8YaaqPItZ7qiVVhKbDX7P Op9X04csiIlkTHgN4oAkjJKuPg3e92dgaP8KhApYN3RZiCPqOfZQQWiBFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0PIfy8HVzq1DwAK3eBw1JT0fMcMB8GA1UdIwQY MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVs7TgmA nG29hsKKRekcxEcgTGzqpsJ1qTGwbOU0hO3b64Z76OgzgnOIvGsSRB0V1zlF3yAP qvnFptqypYUpSFkJB9SisS5SQMeBNxtxUYuWAIEDhBHcXhELRis6+a7dU1ex5xkV CwzRzof4qwd68nhwh0K3KCl8qX9kljrHawiueaNBOCjNgM6lz8nvgY1QRq/kzxZI NwIbkLCafNLFq1cysoYH2yYsrMhnUL/0Exsok114GhNAitkuyFQCnlzEaE7V6/9R E9rK3nAU/MEql9faWHq9LgQ6cTH2QB0drHkVAfBT4Qm5U1MrhnSOKZt1UT7SLja9 hp898zrapzIung== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:14 2025 by rpki-client